Privacy Policy
Last updated: February 26, 2026
1. Introduction
This Privacy Policy explains how the Pixift platform ("Platform") collects, uses, stores, and protects your personal data. We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) and the Turkish Personal Data Protection Law (KVKK, Law No. 6698).
2. Data Controller
Pixift is the data controller responsible for processing your personal data. For inquiries regarding data processing, please contact us at [email protected].
3. Data We Collect
We collect the following personal data: identity information (name, email address, profile photo via Google account); subscription and payment information (plan and payment status processed through our payment provider); marketplace data (third-party marketplace account information and session data); device information (unique device identifier in the desktop application); usage data (Platform interactions, feature usage); SMS data (only payment verification codes via the Android application); IP address and session information.
4. Legal Basis for Processing
Your personal data is processed based on the following legal grounds under GDPR Article 6: performance of a contract (providing Platform services), legitimate interests (Platform security and improvement), explicit consent (marketplace cookies and SMS data), and legal obligation (accounting and tax requirements).
5. How We Use Your Data
Collected data is used for the following purposes: providing and improving Platform services, user authentication and session management, subscription and payment processing, commission calculation and price analysis, marketplace listing management, order automation services, customer support, and implementing security measures.
6. Cookies
The Platform uses essential cookies for session management and language preferences. Authentication cookies are managed by NextAuth.js. Marketplace cookies are stored only in the desktop application, solely for listing management purposes and with your explicit consent. The Platform does not use third-party cookies for analytics or advertising purposes.
7. Third-Party Services
Your data may be shared with third-party services for authentication, payment processing, and server hosting. Your marketplace data is processed solely on your behalf and with your authorization. Your data is never shared with third parties for advertising or marketing purposes.
8. Data Security
We implement technical measures to protect your data including HTTPS encryption, secure session management, rate limiting, input validation, SQL injection protection, and regular security updates. The desktop application provides additional security layers through sandbox isolation, context isolation, and IPC channel verification.
9. Data Retention
Your personal data is retained as long as your account remains active. Upon account deletion, your personal data will be removed within a reasonable timeframe. Certain data (payment records, audit logs) may be retained for the legally required period due to statutory obligations. Marketplace cookies are deleted at session end or upon user request.
10. Your Rights
Under GDPR and KVKK, you have the following rights: the right to access your personal data, the right to rectification of inaccurate data, the right to erasure ("right to be forgotten"), the right to restriction of processing, the right to data portability, the right to object to processing, and the right to withdraw consent at any time. To exercise these rights, please contact us at [email protected]. We will respond to your request within 30 days.
11. International Data Transfers
Your data may be processed on servers located in the European Union (Germany). Through authentication and payment services, your data may be transferred to the United States. These transfers are carried out in compliance with GDPR Chapter V provisions and appropriate safeguards including Standard Contractual Clauses.
12. Children's Privacy
The Platform is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have collected personal data from a child, we will promptly delete such data.
13. Policy Changes
We reserve the right to update this Privacy Policy from time to time. Significant changes will be communicated through the Platform or via email. We recommend that you review the current policy regularly.
14. Contact
For questions about this Privacy Policy or your personal data, please contact us at [email protected]. Requests under GDPR or KVKK will be responded to within 30 days.